MAL-2025-4363 Malicious code in internalwkl-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 929f2a7e5622ef6954156300b8095508bdebc3f69573d35fdcdb9785504809ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fc-accordion

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gcfront (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9008d62273fcb2b4acf2f960d8281bf81acd3745ed3886f7c6f1bb08b4bbf64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4314 Malicious code in client-microsite-reactjs-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e7614cd043fdaba853ac20fee4ef3aaa1ff2d0cc51534ca1ab3bc89a636d654 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4334 Malicious code in document-list-extra-questions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f311a1014dd39c97963383ae0240c9ced38e74b96e8b880acd9c1bf8974c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4345 Malicious code in fc-card-overview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52e92e70129fc8f9de1f5052d516f6fd499edcfc902e3f08c68db8c3ea792448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cardbuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f2276e716b290bb85f3f6aa2adeee74453a0e1ed7fb32e56a420b3676cffad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in user-auth-prod

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in badoo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f34bcbd01ca161f63d72e98370e08614774ebfcc25c4b90ac0ec79d6825baff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4308 Malicious code in child-youth-promotion-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c48fe1487afbeef04c06a25fa129aec8e836dc6ff2829c1c8dedf5b239e2e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4371 Malicious code in leetrjohn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a91ba15bd1785240f04a28a2c445d1f0bd6972f9d3fc48fd6b0511aad6757c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4397 Malicious code in rth-host-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f0cc579318821b02f953f5352cd75b9821dce3effb14a8e80f8b0ce416e77f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in performance-appraisal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fdbbe3c18d12e46e21b82f0cd45dd7a710cb5d467be8dfd538483a6aa5bf3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4291 Malicious code in 12octsportsday (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79a0b726d25448621e84a3424b411c1c37c89b80d5a5c4286857fc61ac52257 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rapper-wish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab0c771060f1519932c1a3aa17e1bb894fe76c1fc825c39a1abe9f76b77d5874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in index_patterns_test_plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4355 Malicious code in gop_status_frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3361e51fa8b0f6d022491e1aedda9bf77bf9c114f044cff36bdcbf5fb86a160f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4374 Malicious code in mix-hub-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f57bb12883c40162bea1eae604cbd15c20f2f0ca00416ccf4473be6447efd70d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4400 Malicious code in seatable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 534db55497a58d9007903dfa5dfe418fd37c2ab3ef4a8a47567e44e3a7ada101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4304 Malicious code in bkwebportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7c39ef0c973b66c8961eb724a9f266786f1ce3683c4f2f1925ade0f5e4d39c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...